Overview
overview
7Static
static
3gtkhash-w3...er.exe
windows10-ltsc_2021-x64
7_icons/org...sh.ico
windows10-ltsc_2021-x64
3_scripts/postinst.cmd
windows10-ltsc_2021-x64
3_scripts/postinst.sh
windows10-ltsc_2021-x64
3mingw32/bin/edit.dll
windows10-ltsc_2021-x64
3mingw32/bi...he.exe
windows10-ltsc_2021-x64
1mingw32/bi...rs.exe
windows10-ltsc_2021-x64
3mingw32/bi...as.exe
windows10-ltsc_2021-x64
1mingw32/bi...le.exe
windows10-ltsc_2021-x64
3mingw32/bi...er.exe
windows10-ltsc_2021-x64
3mingw32/bi...ch.exe
windows10-ltsc_2021-x64
3mingw32/bi....0.exe
windows10-ltsc_2021-x64
1mingw32/bi...sh.exe
windows10-ltsc_2021-x64
3mingw32/bi...-0.dll
windows10-ltsc_2021-x64
3mingw32/bi...-0.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...on.dll
windows10-ltsc_2021-x64
3mingw32/bi...ec.dll
windows10-ltsc_2021-x64
3mingw32/bi...nc.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-2.dll
windows10-ltsc_2021-x64
3mingw32/bi...-2.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-0.dll
windows10-ltsc_2021-x64
3mingw32/bi...-1.dll
windows10-ltsc_2021-x64
3mingw32/bi...-0.dll
windows10-ltsc_2021-x64
3var/lib/pa...nstall
windows10-ltsc_2021-x64
1var/lib/pa...nstall
windows10-ltsc_2021-x64
1var/lib/pa...nstall
windows10-ltsc_2021-x64
1var/lib/pa...nstall
windows10-ltsc_2021-x64
1Analysis
- max time kernel
898s - max time network
428s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
29/04/2026, 11:34
Behavioral task
behavioral1
Sample
gtkhash-w32-1.4-1-installer.exe
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral2
Sample
_icons/org.gtkhash.gtkhash.ico
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral3
Sample
_scripts/postinst.cmd
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral4
Sample
_scripts/postinst.sh
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral5
Sample
mingw32/bin/edit.dll
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral6
Sample
mingw32/bin/fc-cache.exe
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral7
Sample
mingw32/bin/gdk-pixbuf-query-loaders.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral8
Sample
mingw32/bin/glib-compile-schemas.exe
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral9
Sample
mingw32/bin/gspawn-win32-helper-console.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral10
Sample
mingw32/bin/gspawn-win32-helper.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral11
Sample
mingw32/bin/gtk-launch.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral12
Sample
mingw32/bin/gtk-update-icon-cache-3.0.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral13
Sample
mingw32/bin/gtkhash.exe
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral14
Sample
mingw32/bin/libasprintf-0.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral15
Sample
mingw32/bin/libatk-1.0-0.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral16
Sample
mingw32/bin/libatomic-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral17
Sample
mingw32/bin/libbrotlicommon.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral18
Sample
mingw32/bin/libbrotlidec.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral19
Sample
mingw32/bin/libbrotlienc.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral20
Sample
mingw32/bin/libbz2-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral21
Sample
mingw32/bin/libcairo-2.dll
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral22
Sample
mingw32/bin/libcairo-script-interpreter-2.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral23
Sample
mingw32/bin/libdatrie-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral24
Sample
mingw32/bin/libexpat-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral25
Sample
mingw32/bin/libfontconfig-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral26
Sample
mingw32/bin/libfribidi-0.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral27
Sample
mingw32/bin/libgcc_s_dw2-1.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral28
Sample
mingw32/bin/libgdk-3-0.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral29
Sample
var/lib/pacman/local/mingw-w64-i686-adwaita-icon-theme-3.36.0-1/install
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral30
Sample
var/lib/pacman/local/mingw-w64-i686-fontconfig-2.13.92-1/install
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral31
Sample
var/lib/pacman/local/mingw-w64-i686-gtkhash-1.4-1/install
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral32
Sample
var/lib/pacman/local/mingw-w64-i686-hicolor-icon-theme-0.17-1/install
Resource
win10ltsc2021-20260130-en
General
- Target mingw32/bin/gspawn-win32-helper-console.exe
- Size 18KB
- Sample260429-nplhrafs2p
- SHA256 37cf8e5d91b33c27e93af8b8b527c0b545523e77ca3197d01c2046308e8f07bb
- MD5 99212f66d42f93eed307a294bb2d5781
- SHA1 13f64a3b501efbf58f2275c2edf7a4091e0b2779
- SHA512 e75485bd5a02e8924d5573de7d0dd604fa84a1d99305041b7b65704cc913fc6e88e42416089f50756721b7e914713b224aac4fe38c67d788643fa631bcb23f32
- SSDEEP 192:5nrTf2+0gnd5DC9iQPio5q7ZX6NOufVUfrYAJDisCAbek30GvY/CszO:d72vgnHO9y74fecAbeNGA/CWO
- TLSH T1A282D846F506A5F1E750F2B5C89ACBB2C33ABD220932DB3AFF55F2583523985990B047
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 5900 2148 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\mingw32\bin\gspawn-win32-helper-console.exe"C:\Users\Admin\AppData\Local\Temp\mingw32\bin\gspawn-win32-helper-console.exe"1⤵PID:2148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 5002⤵
- Program crash
PID:5900
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2148 -ip 21481⤵PID:5712